74 matches found
Missing Authentication for Critical Function
Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the /management/stop handler in the metrics management server on port 9091. An attacker can terminate the proxy, datanode, or querynode by sending a crafted HTTP GET request to...
CLEANSTART-2026-KD56699 Security fixes in metrics-server-fips 0.8.0-r5
Package metrics-server-fips version 0.8.0-r5 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...
CLEANSTART-2026-BL61826 Security fixes in metrics-server-fips 0.7.2-r3
Package metrics-server-fips version 0.7.2-r3 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...
CLEANSTART-2026-UX42844 Security fixes in metrics-server 0.8.0-r0
Package metrics-server version 0.8.0-r0 fixes 5 vulnerabilities: CVE-2025-61727, CVE-2025-61729, CVE-2025-47907, CVE-2025-0913, CVE-2025-4673...
CVE-2026-8670 Insecure session handling on metrics web server
Insufficient session expiration vulnerability in syslink software AG Avantra on Linux, Windows allows Reusing Session IDs aka Session Replay. This issue affects Avantra: before 25.3.1...
CLEANSTART-2026-NV82543 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the metrics-server-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
CLEANSTART-2026-UL17352 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the metrics-server-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
CLEANSTART-2026-AU31441 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Multiple security vulnerabilities affect the metrics-server-fips package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
GHSA-9V7R-X7CV-V437 vulnerabilities
Vulnerabilities for packages: metrics-server...
GHSA-VQ7J-GX56-RXJH vulnerabilities
Vulnerabilities for packages: kind, metrics-server, kubeflow-katib...
GHSA-VV9M-32RR-3G55 vulnerabilities
Vulnerabilities for packages: kind, metrics-server, kubeflow-katib...
GHSA-892H-R6CR-53G4 vulnerabilities
Vulnerabilities for packages: metrics-server...
GHSA-RXV8-V965-V333 vulnerabilities
Vulnerabilities for packages: metrics-server...
GHSA-679V-HH23-H5JH vulnerabilities
Vulnerabilities for packages: kind, metrics-server, kubeflow-katib...
GHSA-J6M3-GC37-6R6Q vulnerabilities
Vulnerabilities for packages: nri-f5, aws-load-balancer-controller, aws-flb-firehose, kyverno-policy-reporter, helm-push, delve, terraform-docs, shfmt, kubeflow-katib, ytt, nri-prometheus, gobuster, nri-nginx, kubernetes-csi-external-provisioner, kube-logging-operator, prometheus-pushgateway,...
GHSA-FGQ5-Q76C-GX78 vulnerabilities
Vulnerabilities for packages: nri-f5, aws-load-balancer-controller, aws-flb-firehose, kyverno-policy-reporter, helm-push, delve, terraform-docs, shfmt, kubeflow-katib, ytt, nri-prometheus, gobuster, nri-nginx, kubernetes-csi-external-provisioner, kube-logging-operator, prometheus-pushgateway,...
GHSA-7WRW-R4P8-38RX vulnerabilities
Vulnerabilities for packages: aws-load-balancer-controller, aws-flb-firehose, shfmt, nri-prometheus, kube-logging-operator, ko, sftpgo-plugin-kms, mockery, mockgen, stakater-reloader, kube-fluentd-operator, aws-flb-cloudwatch, dagdotdev, cfssl, kubevela, secrets-store-csi-driver-provider-gcp,...
GHSA-RXV8-V965-V333 vulnerabilities
Vulnerabilities for packages: metrics-server...